Information Obligation Under the Personal Data Protection Act
Information on the processing of personal data
The provision of this information is the fulfillment of the obligation under Art. 13 sec. 1 and 2 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46 / EC (general regulation on data protection) – hereinafter referred to as GDPR.
Data Administrator, Personal Data Protection Inspector
The administrator of your personal data is the Hospital for Nervo and Psychically Ill. Stanisław Kryzan in Starogard Gdański:
address: ul. Skarszewska 7, 83-200 Starogard Gdański,,
phone: 58 562 06 00, e-mail: firstname.lastname@example.org
A Personal Data Protection Inspector has been appointed in the Hospital, who can be contacted by e-mail: email@example.com, as well as by phone – every Monday between 15:00-17:00, at: 58 562 06 00 ext. 2122. The Inspector may be contacted in all matters relating to the processing of personal data and the exercise of rights related to data processing.
Purpose, legal basis and period of personal data processing
Your personal data is processed by the Hospital in order to perform the activities necessary to provide health services and manage the process of providing health services, including the fulfillment of related obligations under the law.
The legal basis for the processing of personal data is Art. 6 sec. 1 lit. “C” and “d” and Art. 9 sec. 2 lit. “H” of the GDPR and the provisions of national law, in particular: the Act of November 6, 2008 on the rights of the patient and the Patient Ombudsman, the Act of August 24, 2004 on health care services financed from public funds, the Act of April 28 2011 on the information system in the health service.
Your personal data will be stored until the legal obligation to store them expires, in particular the obligation to store medical documentation, and – in the event of claims – until the expiry of the limitation period.
Rights of the data subject
In connection with the processing of personal data, you have the right to:
access to the content of your data, including the right to obtain a copy of the personal data subject to processing,
rectification or supplementation, if you believe that the personal data processed by the Hospital are inconsistent with the facts,
request deletion of data or limitation of their processing – in cases provided for by law.
In the event of rectification, deletion or limitation of the processing of personal data, you have the right to receive an appropriate notification.
If you find that the Hospital, when processing your personal data, violates the provisions of the Regulation, you have the right to lodge a complaint with the supervisory body, which is the President of the Office for Personal Data Protection.
The requirement to provide personal data
Providing personal data is necessary for the hospital to provide you with health services. The provision of your personal data by you is voluntary, but the consequence of not providing it is the inability to provide you with health services by the Hospital.
Recipients of personal data
Your personal data may be made available to recipients of data related to the Hospital, contracts for entrusting the processing of personal data and entities authorized to obtain data on the basis of applicable law, which will make such a request based on an appropriate legal basis.